cockpit-hq cockpit
2 known vulnerabilities in cockpit-hq cockpit, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-105217 CVSS 2.3 low Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network…
- CVE-2026-82449 CVSS 6.9 medium Cockpit CMS before 2.14.1 contains an account enumeration vulnerability in the auth check endpoint due to timing discrepancies in password…